• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

New vulnerability? (plesk 9.5.4)

Me too

Same thing to me . I had to change my plesk server toward 10.4.
I don't still find the way they hack the panel plesk account.
Take care, i just delete all infected files (.pl .cgi, disable perl and cgi, it has bee hacked one more time after a week...
 
Yes me too

Hello ;

I got the same thing , things i dont understand :

- Why PLESK create a file with (0 bytes ) with system user ( for suspended domains ) in /var/spool/cron ????

- Users have no privilege to create cron jobs, how can hackers create files with users names in /var/spool/cron ?

Thanks
 
Back
Top